The vulnerability of the built-in software in Intel NUC Kits stems from insufficient input data validation. This allows attackers to gain access to protected information, cause system failures, or enhance their privileges.

🗓️ 21 Jun 2019 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 2 Views

Intel NUC Kit built-in software vulnerable due to insufficient input validation and testing, enabling access, service disruption, or privilege escalation.

Reporter	Title	Published	Views	Family All 9
CNVD	Intel NUC Kit Input Validation Error Vulnerability (CNVD-2019-42733)	14 Jun 201900:00	–	cnvd
CVE	CVE-2019-11125	13 Jun 201915:36	–	cve
Cvelist	CVE-2019-11125	13 Jun 201915:36	–	cvelist
EUVD	EUVD-2019-2829	7 Oct 202500:30	–	euvd
Intel	Intel® NUC Firmware Advisory	11 Jun 201900:00	–	intel
NVD	CVE-2019-11125	13 Jun 201916:29	–	nvd
Prion	Input validation	13 Jun 201916:29	–	prion
RedhatCVE	CVE-2019-11125	9 Jan 202610:10	–	redhatcve
ThreatPost	Intel NUC Firmware Open to Privilege Escalation, DoS and Information Disclosure	12 Jun 201913:25	–	threatpost

Vulners

Node

intel intel_nuc_kit_nuc8i7hnkRange<0054

OR

intel intel_nuc_kit_nuc8i7hvkRange<0054

OR

intel intel_nuc_kit_nuc8i3bexRange<0071

OR

intel intel_nuc_kit_nuc8i5bexRange<0071

OR

intel intel_nuc_kit_nuc8i7bexRange<0071

OR

intel intel_compute_card_cd1c64gkRange<0050

OR

intel intel_compute_card_cd1p64gkRange<0050

OR

intel intel_nuc_kit_nuc8i3cyxRange<0040

OR

intel intel_nuc_kit_nuc7i3dnxRange<0063

OR

intel intel_nuc_kit_nuc7i5dnxRange<0063

OR

intel intel_nuc_kit_nuc7i7dnxRange<0063

OR

intel intel_compute_stick_stk2m3w64ccRange<0060

OR

intel intel_compute_stick_stk2m364ccRange<0060

OR

intel intel_compute_stick_stk2mv64ccRange<0060

OR

intel intel_nuc_kit_nuc6i7kykRange<0062

OR

intel intel_nuc_kit_nuc7pjyRange<0049

OR

intel intel_nuc_kit_nuc7cjyRange<0049

OR

intel intel_nuc_kitnuc6cayxRange<0060

OR

intel intel_nuc_kit_de3815tyb_(bios_id_code_tybyt20h.86a)Range<0020

OR

intel intel_nuc_kit_de3815tyb_(bios_id_code_tybyt10h.86a)Range<0065

OR

intel intel_nuc_kit_nuc5cpyhRange<0076

OR

intel intel_nuc_kit_nuc5pgyhRange<0076

OR

intel intel_nuc_kit_nuc5ppyhRange<0076

OR

intel intel_nuc_kit_nuc5i3ryxRange<0379

OR

intel intel_nuc_kit_nuc5i5ryxRange<0379

OR

intel intel_nuc_kit_nuc5i7ryxRange<0379

OR

intel intel_nuc_kit_d34010wyxRange<0051

OR

intel intel_nuc_kit_d54250wyxRange<0051

OR

intel intel_nuc_kit_nuc6i3syxRange<0070

OR

intel intel_nuc_kit_nuc6i5syxRange<0070

OR

intel intel_nuc_kit_nuc7i3bnxRange<0079

OR

intel intel_nuc_kit_nuc7i5bnxRange<0079

OR

intel intel_nuc_kit_nuc7i7bnxRange<0079

OR

intel intel_compute_card_cd1iv128mkRange<0036

OR

intel intel_compute_card_cd1m3128mkRange<0056

OR

intel intel_compute_stick_stck1a8lfcRange<0039

OR

intel intel_compute_stick_stck1a32wfcRange<0039

OR

intel intel_nuc_kit_dn2820fykhRange<0067

OR

intel intel_nuc_kit_nuc5i5myxRange<0051

OR

intel intel_nuc_kit_nuc5i3myxRange<0054

Source	Link
intel	www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00264.html
vuldb	www.vuldb.com/
web	www.web.nvd.nist.gov/view/vuln/detail

23 Mar 2021 00:00Current

5.5Medium risk

Vulners AI Score5.5

CVSS 26

CVSS 37.5

EPSS0.00392

Intel NUC Kit built in software insufficient input validation insufficient testing unauthorized access service disruption privilege escalation